scratch.md: kubeconfig should not embed the CA cert
This commit is contained in:
@@ -280,7 +280,7 @@ users:
|
|||||||
clusters:
|
clusters:
|
||||||
- name: local
|
- name: local
|
||||||
cluster:
|
cluster:
|
||||||
certificate-authority-data: ${CA_CERT_BASE64_ENCODED}
|
certificate-authority: /srv/kubernetes/ca.crt
|
||||||
contexts:
|
contexts:
|
||||||
- context:
|
- context:
|
||||||
cluster: local
|
cluster: local
|
||||||
@@ -289,10 +289,6 @@ contexts:
|
|||||||
current-context: service-account-context
|
current-context: service-account-context
|
||||||
```
|
```
|
||||||
|
|
||||||
Where CA_CERT_BASE64_ENCODED can be generated like `< ca.crt base64
|
|
||||||
-w0`. Alternatively you can refer to a file (e.g. `certificate-authority:
|
|
||||||
/etc/kubernetes/ca.crt`).
|
|
||||||
|
|
||||||
Put the kubeconfig(s) on every node. The examples later in this
|
Put the kubeconfig(s) on every node. The examples later in this
|
||||||
guide assume that there are kubeconfigs in `/var/lib/kube-proxy/kubeconfig` and
|
guide assume that there are kubeconfigs in `/var/lib/kube-proxy/kubeconfig` and
|
||||||
`/var/lib/kubelet/kubeconfig`.
|
`/var/lib/kubelet/kubeconfig`.
|
||||||
|
|||||||
Reference in New Issue
Block a user